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CLAIMS : 

What is claimed is: 

1. A metthod of updating security configurations of a 
plurality of servers, comprising: 

changing security information in a centralized 
server; 

receivlLng an update command; and 

downloading the changed security information to the 
plurality oi servers in response to receiving the update 
command, wherein the downloaded changed security 
information is used to update the security configurations 
of the plurality of servers. 
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2. The method of claim 1, wherein the plurality of 
servers are windows NT servers and the centralized server 
is a directoijy server, 

3. The methbd of claim 1, wherein the centralized 
server is a directory server and wherein changing the 
security information includes using an editor to change a 
directory listiLng in the centralized server. 

4. The method of claim 1, wherein the security 
configurations of the plurality of servers are updated by 
updating securitiy parameter lists associated with a 
plurality of files and/or resources associated with each 
of the plurality \of servers. 
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5. The method of claim 4, wherein the security 
parameter lists identify authorized users or authorized 
groups of users of the files and/or resources associated 
with the security parameter lists. 

6. The method of claim 1, wherein the update command is 
received from a network administrator. 



15 



7. The method of claim 1, wherein the update command is 



10 received at sc 



leduled periodic times. 



8. The method of claim 1, wherein the update command is 
received from one or more of the plurality of servers. 

9. The method of claim 1, wherein the centralized 
server is a ligjht weight directory access protocol 
server , 



10. The method lof claim 1, wherein downloading the 
20 changed security! information includes filtering a 

directory listing stored on the centralized server to 
extract the changed security information. 

11. The method ot claim 1, wherein the security 

25 configurations are updated by filtering the downloaded 
changed security ilnformation to extract only necessary 
update information! for updating the security 
configurations and then updating the security 
configurations bas^d on the extracted necessary update 

30 information. 



12. A security configuration update server for updating 
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security configurations of a plurality of servers, 
comprising: 

a controller; 

a netwo::k interface coupled to the controller; and 
a storage device coupled to the controller, wherein 
the controller, in response to receiving an update 
command, downloads security information stored in the 
storage device to the plurality of servers via the 
network interface, wherein the downloaded security 
information is used to update the security configurations 
of the plurality of servers. 



13 . The securjity configuration update server of claim 
12, wherein the plurality of servers are Windows NT 
servers and the security configuration update server is a 
directory server. 

14. The security configuration update server of claim 
12, wherein the update command includes changes to the 
security information. 

15. The securi :y configuration update server of claim 



12, wherein the 



security configurations of the plurality 



of servers are ipdated by updating security parameter 
lists associated with a plurality of files and/or 
resources associ]ated with each of the plurality of 
servers . 



16. The securi 
15, wherein the 
authorized users 
files and/or 



configuration update server of claim 
i^ecurity parameter lists identify 
or authorized groups of users of the 
resolu^rces associated with the security 
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parameter lists. 

17. Tl^ie security configuration update server of claim 
12; wherein the update command is received from a network 
administrator . 
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18. Thdl security configuration update server of claim 
12, wherfein the update command is received at scheduled 
periodic 1 times . 

19. The security configuration update server of claim 
12, wheretn the update command is received from one or 
more of tme plurality of servers. 



15 20. The sjecurity configuration update server of claim 

12, wherein the security configuration update server is a 
light weight directory access protocol server. 
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21. The security configuration update server of claim 



12, wherein 
includes fi'.. 



downloading the changed security information 
tering a directory listing stored in the 
storage devijce to extract the changed security 
information. 



sec jr 



th<5 



22. The 
12, wherein 
filtering 
only necessa 
security con 
conf igurati 
information 



ions 



ity configuration update server of claim 
:he security configurations are updated by 

downloaded security information to extract 
y update information for updating the 
::igurations and then updating the security 
based on the extracted necessary update 
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23. A computer program product in a computer readable 
medium for updating security configurations of a 
plurality lof servers, comprising: 

first! instructions for changing security information 
in a centralized server; 

seconp instructions for receiving an update command; 

and 

third j instructions for downloading the changed 
security information to the plurality of servers in 
response td receiving the update command, wherein the 
downloaded changed security information is used to update 
the security configurations of the plurality of servers. 



fU 



25 



30 



24. The computer program product of claim 23, wherein 
15 the central;. zed server is a directory server and wherein 
the first instructions include instructions for using an 
editor to change a directory listing in the centralized 
server. 

20 25. The computer program product of claim 23, wherein 



the third in 



files and/or 
plurality of 



26, 



tructions include instructions for updating 



security par<imeter lists associated with a plurality of 



resources associated with each of the 
servers . 



The computer program product of claim 25, wherein 



the security barameter lists identify authorized users or 
authorized gri^ups of users of the files and/or resources 
associated wit:h the security parameter lists, 



27. The comp 



ter program product of claim 23, wherein 



the update command is received from a network 
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administ rator . 

28. The \computer program product of claim 23, wherein 
the update command is received at scheduled periodic 
times. 



.3 



in 
□ 



10 



15 



20 



30 



29. The computer program product of claim 23, wherein 
the update command is received from one or more of the 
plurality Df servers. 

30. The ci:)mputer program product of claim 23, wherein 



the centra 



ized server is a light weight directory access 



protocol s(5rver. 

31. The computer program product of claim 23, wherein 
the third ijnstructions include instructions for filtering 
listing stored on the centralized server to 
changed security information. 



a directory 
extract the 



32. A method in a data processing system for updating 
access information for a plurality of servers, the method 
comprising: 

collecting changes to access information at the data 
processing system to form modified access information; 



25 and 



responsive to a policy, transferring the modified 
access information to the plurality of servers, wherein 



the modified 



access information is used to update the 



receiving a r 



security configurations of the plurality of servers. 



33. The method of claim 32, wherein the policy comprises 



quest to update the security configurations 
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for the plurality of servers. 

34. The metpod of claim 32, wherein the policy comprises 
periodically! initiating transfer of modified access 
information no the plurality of servers. 
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35. The method of claim 32, wherein the policy comprises 
initiating thti transfer of the modified access 
information to the plurality of servers in response to a 
selected event,. 

36. The method of claim 35, wherein the selected event 



is a periodic 



event . 



15 37. A data processing system, comprising: 



a central 
a plurali 
server by at 1 
server stores 



Lzed server; and 

1:y of servers coupled to the centralized 
6;ast one network, wherein the centralized 
security information, and wherein when the 
centralized server receives an update command, the 
security infornation stored in the centralized server is 



downloaded to a 
the downloaded 



t least one of the plurality of, servers, 
security information being used by the at 
least one of the plurality of servers to update the 
security configurations of the at least one of the 
plurality of servers. 



38. The system 
servers are Windows 
is a directory 



39. The system 



of claim 37, wherein the plurality of 

NT servers and the centralized server 
feerver . 



of claim 37, wherein the security 
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conf igurapion of the at least one of the plurality of 
servers updated by updating a security parameter list 
associated! with a one or more files and/or resources 
associated \with the at least one of the plurality of 
servers . 
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40. The system of claim 37, wherein the security 
information lis filtered by the centralized server, prior 
to downloading the security information, to extract only 
security information that has been changed. 



